Improper input validation vulnerability has a CVSS score of 9.8 out of 10
All paid extensions have been compromised, but the free version appears to be safe
The security flaw enables attackers to inject a malicious payload into a merchant's website site
Magento rushes out patch for critical vulnerability to protect open source and commercial versions of its ecommerce software
Not the first time that the Magento Commerce platform, used by OnePlus, has been hacked, say security experts